sdcc_users-l AT lists.bnl.gov

Subject: Scientific Data & Computing Center

List archive

[Sdcc_users-l] (Time window change) Keycloak new MFA mechanism activation - January 28th Thursday 5pm - 6pm

From: RACF Computing Facility Staff <announce AT rcf.rhic.bnl.gov>
To: rhic-rcf-l AT lists.bnl.gov, sdcc_users-l AT lists.bnl.gov, usatlas-users-l AT lists.bnl.gov
Subject: [Sdcc_users-l] (Time window change) Keycloak new MFA mechanism activation - January 28th Thursday 5pm - 6pm
Date: Wed, 27 Jan 2021 12:57:15 -0500

Summary:
Keycloak new MFA mechanism activation

Duration:
01/28/21 Thursday @ 5:00 PM EST - 01/28/21 @ 6:00PM EST

Group Responsible:
GS (General Services)

Affected Area:
External services utilizing Keycloak SDCC MFA realm (ex, Jupyterhub,
Federated Login via InCommon)

Expected User Impact:
In the unlikely case TOTP tokens are created during this window they will be
invalidated and require re-generation once the downtime is over.

Maintenance Type:
Transparent with minor impact stated above

Submitted By:
Masood Zaran, mzaran AT bnl.gov
Mizuki Karasawa, mizuki AT bnl.gov

Description:
Migration of MFA TOTP flow from Keycloak to PrivacyIDEA. Migration of
existing TOTP tokens into IPA as well.

--
This message has been forwarded from the RACF announcements page.
Recent messages are available at:
https://www.racf.bnl.gov/Facility/RACFNews/announce.html

[Sdcc_users-l] (Time window change) Keycloak new MFA mechanism activation - January 28th Thursday 5pm - 6pm, RACF Computing Facility Staff, 01/27/2021